Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in the auth_checkpass function in the login page in NullLogic Groupware 1.2.7 allows remote attackers to execute arbitrary SQL commands via the username parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NullLogic Groupware SQL_queryf 函数SQL注入安全漏洞
Vulnerability Description
Groupware是一个开源的团队协作软件，包含有即时消息、公共论坛、邮件等多种功能。 远程攻击者可以通过向Groupware的多个模块提交恶意参数请求导致拒绝服务或执行任意代码。 Groupware在与数据库服务器通讯时通常会调用SQL_queryf函数，该函数会使用C格式字符串和其他参数来创建SQL查询。例如，在试图登录的时候，auth_checkpass函数会生成以下查询： if ((sqr=SQL_queryf(sid， SELECT userid， password FROM gw_users
CVSS Information
N/A
Vulnerability Type
N/A